$ rpki-client -vvf repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft File: 535C0FE8EE7BE7E1C8897B031858C36344038072.mft (raw, json) Hash identifier: 1uYWz+UBCUKIa0svQX7Ei7ZG2Nh2togCOmiwJ14UfqI= Subject key identifier: 77:05:CE:1B:E3:EA:71:B8:C1:E8:26:62:B1:4A:16:3E:C4:84:1C:D5 Authority key identifier: 53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 Certificate issuer: /CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Certificate serial: 16FF26DD7EFEAEBB0690C6C9FEADDB5300DCD0A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft Manifest number: 96 Signing time: Fri 05 Sep 2025 00:40:53 +0000 Manifest this update: Fri 05 Sep 2025 00:35:53 +0000 Manifest next update: Mon 08 Sep 2025 09:30:53 +0000 Files and hashes: 1: 535C0FE8EE7BE7E1C8897B031858C36344038072.crl (hash: lFVz0Zj7gu6BY73er0GmOqysaxDqcbrZ0uap5XmMXVk=) 2: 3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (hash: RrMbT80FUemGe695AxppDWAP2LkCS0fiZaNilGLH1lg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 09:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ff:26:dd:7e:fe:ae:bb:06:90:c6:c9:fe:ad:db:53:00:dc:d0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Validity Not Before: Sep 5 00:35:53 2025 GMT Not After : Sep 8 09:30:53 2025 GMT Subject: CN=7705CE1BE3EA71B8C1E82662B14A163EC4841CD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1d:a8:b4:8d:d7:ee:4b:4d:77:bd:c1:1a:f3: c4:50:ff:f2:fa:d1:bb:9b:08:45:62:c3:86:10:c9: 2f:71:d6:d3:12:d8:ff:97:b8:a2:51:ad:04:08:63: c6:5a:d2:01:ce:a9:7e:7e:27:fa:d7:34:a2:12:bb: ae:bc:fa:82:85:85:9d:35:f7:58:de:a0:10:01:05: 23:22:86:44:6f:81:8f:ad:a9:16:ba:b4:0c:bf:4a: 72:1e:52:b4:eb:91:fb:58:11:ec:ef:ec:f5:e3:6f: ec:52:f0:da:79:42:a6:81:c8:dd:7f:66:b6:97:71: b6:5f:93:da:54:13:06:fd:17:e6:16:35:eb:e0:e9: 70:1c:2b:a9:10:cb:35:78:2a:08:c3:94:f0:e8:be: 82:92:af:fb:4e:47:d3:8d:87:9c:74:12:b5:f8:b2: db:14:19:d9:61:fb:94:7a:84:0b:8f:f6:92:b3:07: b0:1f:e8:32:11:38:cf:b7:f5:d4:06:41:b5:27:df: e7:e5:16:1a:ee:fc:25:76:24:59:f7:26:20:94:75: 18:a7:ae:aa:a7:40:4d:93:d6:1b:c3:a0:ad:a7:14: 8f:6b:38:74:3c:4b:a1:3f:de:d7:e6:32:65:7f:05: ad:fd:56:3b:e9:41:b5:25:64:1c:30:3e:ef:15:dc: 30:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:05:CE:1B:E3:EA:71:B8:C1:E8:26:62:B1:4A:16:3E:C4:84:1C:D5 X509v3 Authority Key Identifier: keyid:53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:d0:f9:b7:49:6a:cb:f4:7c:ca:b8:f1:0c:2e:7e:8e:7a:ba: 61:57:0c:23:72:73:63:d9:ff:c2:c3:06:1f:cf:a1:0f:3b:5a: 96:80:38:c8:41:bd:07:07:95:f4:82:0a:ba:be:c9:1f:50:85: aa:99:e5:d0:a6:cd:7b:c3:ae:1e:81:94:b3:20:bf:e3:d0:f2: 72:5c:60:f0:3a:11:f3:47:5c:a5:ce:66:f4:a5:06:84:2a:77: 87:2e:b2:ff:63:9e:2e:1c:f1:49:df:3a:a9:da:1d:3e:d7:e4: e0:59:56:0d:b2:fd:f4:51:42:1d:b3:6e:e6:a7:ef:0a:fd:b7: a0:c3:6d:4a:37:31:e4:99:ca:46:23:74:4d:81:b4:13:54:89: 99:b1:04:50:0a:1d:61:a4:7b:c0:ee:aa:19:7f:7a:a1:32:a4: 23:4d:c0:69:51:07:50:87:d8:19:4e:fd:99:4f:77:60:c7:fb: c8:d6:2c:d7:8a:4a:a0:7a:a4:42:60:85:2c:17:3f:e6:3a:45: 9d:22:cb:9a:b0:7e:66:71:83:c8:07:1d:f8:9c:6a:1a:27:35: d8:b2:11:5b:84:7a:b0:3b:4e:7a:16:ac:ce:56:a0:25:e8:04: 01:f0:67:4f:d5:f5:c1:f8:f5:f9:35:19:de:4f:43:08:d5:65: f3:ea:c9:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFv8m3X7+rrsGkMbJ/q3bUwDc0KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0 NDAzODA3MjAeFw0yNTA5MDUwMDM1NTNaFw0yNTA5MDgwOTMwNTNaMDMxMTAvBgNV BAMTKDc3MDVDRTFCRTNFQTcxQjhDMUU4MjY2MkIxNEExNjNFQzQ4NDFDRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Hai0jdfuS013vcEa88RQ//L6 0bubCEViw4YQyS9x1tMS2P+XuKJRrQQIY8Za0gHOqX5+J/rXNKISu668+oKFhZ01 91jeoBABBSMihkRvgY+tqRa6tAy/SnIeUrTrkftYEezv7PXjb+xS8Np5QqaByN1/ ZraXcbZfk9pUEwb9F+YWNevg6XAcK6kQyzV4KgjDlPDovoKSr/tOR9ONh5x0ErX4 stsUGdlh+5R6hAuP9pKzB7Af6DIROM+39dQGQbUn3+flFhru/CV2JFn3JiCUdRin rqqnQE2T1hvDoK2nFI9rOHQ8S6E/3tfmMmV/Ba39VjvpQbUlZBwwPu8V3DClAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdwXOG+PqcbjB6CZisUoWPsSEHNUwHwYDVR0j BBgwFoAUU1wP6O575+HIiXsDGFjDY0QDgHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzQ1NGQwYi0xYWQ3LTQxZWQtOGU0MC1jY2I2NjY0M2FjZjAvMC81MzVDMEZFOEVF N0JFN0UxQzg4OTdCMDMxODU4QzM2MzQ0MDM4MDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0NDAz ODA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM0NTRkMGItMWFkNy00MWVkLThl NDAtY2NiNjY2NDNhY2YwLzAvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMz NjM0NDAzODA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTQ+bdJasv0fMq48Qwufo56umFXDCNyc2PZ /8LDBh/PoQ87WpaAOMhBvQcHlfSCCrq+yR9QhaqZ5dCmzXvDrh6BlLMgv+PQ8nJc YPA6EfNHXKXOZvSlBoQqd4cusv9jni4c8UnfOqnaHT7X5OBZVg2y/fRRQh2zbuan 7wr9t6DDbUo3MeSZykYjdE2BtBNUiZmxBFAKHWGke8Duqhl/eqEypCNNwGlRB1CH 2BlO/ZlPd2DH+8jWLNeKSqB6pEJghSwXP+Y6RZ0iy5qwfmZxg8gHHficahonNdiy EVuEerA7TnoWrM5WoCXoBAHwZ0/V9cH49fk1Gd5PQwjVZfPqycw= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:45 2025 by rpki-client